Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/_KbvIIgk_B96XEsWWEww5vo2cfs.roa
File:                     _KbvIIgk_B96XEsWWEww5vo2cfs.roa (raw, json)
Hash identifier:          vCh7VAGGBtwqX1LI7ivAfo4+LSoRq7pDZg2iFgtM8Xg=
Subject key identifier:   FC:A6:EF:20:88:24:FC:1F:7A:5C:4B:16:58:4C:30:E6:FA:36:71:FB
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       26
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/_KbvIIgk_B96XEsWWEww5vo2cfs.roa
Signing time:             Fri 22 Jul 2022 00:10:12 +0000
ROA not before:           Fri 22 Jul 2022 00:10:12 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        36.54.64.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 00:10:12 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=FCA6EF208824FC1F7A5C4B16584C30E6FA3671FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:80:55:3d:e0:39:04:de:3a:bf:ff:78:39:56:
                    3c:12:3e:71:49:75:35:9f:14:d4:5d:8d:94:91:de:
                    be:0b:ad:a0:23:33:71:ef:a9:11:d9:fe:2e:f3:c6:
                    73:69:3c:bf:0f:7f:1a:ad:b3:1b:ab:ea:6f:62:da:
                    7f:23:f0:43:77:1e:8a:65:20:11:2d:f7:dd:f9:d5:
                    28:e3:a1:ad:0d:52:e7:93:60:88:49:08:78:f7:1c:
                    f4:45:df:d2:ba:13:40:7f:a5:e1:15:c3:68:c8:c5:
                    46:02:eb:97:82:af:91:0c:75:21:74:24:ac:12:c9:
                    15:44:b7:9a:12:3d:90:a5:4e:6b:39:50:87:b3:1c:
                    3e:ff:c2:2a:13:1a:a0:d0:e8:1e:14:93:a7:7d:7e:
                    74:6c:db:65:f8:8f:5f:47:c5:b0:5f:68:ef:3b:a7:
                    41:87:e7:00:ba:31:0e:4e:79:1e:e0:97:97:4d:42:
                    dc:84:ab:7f:ec:a7:c4:fd:3d:1c:b2:a1:3a:43:91:
                    d3:bd:65:7f:77:59:c7:b8:4a:3b:8e:95:e7:57:01:
                    ad:d3:80:65:b1:26:8f:62:1d:82:b9:f3:25:29:d4:
                    fc:b3:38:b7:c0:35:e8:74:55:b5:57:0a:55:fc:5b:
                    11:9d:ca:68:0a:13:f4:10:30:86:5a:6b:a8:18:d2:
                    81:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A6:EF:20:88:24:FC:1F:7A:5C:4B:16:58:4C:30:E6:FA:36:71:FB
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/_KbvIIgk_B96XEsWWEww5vo2cfs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.54.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         28:e7:a0:1f:8b:7c:c6:54:37:7a:fa:d9:3a:f6:e2:14:a6:db:
         23:83:4a:e7:56:97:2c:29:95:29:9d:72:e2:5c:a4:a6:38:66:
         cd:06:84:5a:88:6e:0d:57:d5:80:7b:79:8b:34:08:07:2b:17:
         8c:05:53:eb:b9:72:27:5b:3b:72:83:20:26:a3:5d:0d:71:fe:
         62:1f:8f:fc:38:ce:55:82:aa:5b:1d:d5:cb:6e:fb:83:1f:5f:
         46:60:7d:6e:da:3e:eb:da:d8:0f:69:45:92:31:34:98:5a:1c:
         a2:d9:17:c8:57:7c:8a:d2:c8:35:d9:c9:92:e7:3c:a5:03:7b:
         22:e8:02:44:e4:d7:64:91:de:72:9f:92:ea:97:dc:51:58:37:
         7f:d0:00:9f:51:be:d2:be:20:c9:e4:4f:5b:5e:f7:d4:cf:b8:
         6e:c9:5c:54:a4:30:dd:d3:88:b5:ff:5e:ca:d8:c8:ba:d6:83:
         80:ef:f0:8f:ee:65:4a:99:e4:81:d9:7f:c4:67:ef:43:58:46:
         8d:ed:1a:a0:41:99:ea:8e:b5:08:1a:84:b1:af:d3:4c:22:28:
         e1:0e:8c:56:cb:f0:11:0f:b6:f2:d0:b6:16:4b:ea:49:b6:83:
         dc:10:b9:6b:39:62:1b:5b:e9:a3:f0:a2:db:2e:89:c3:97:be:
         d2:fe:f2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:59 2025 by rpki-client